Privacy, made plain.

The Pixcelyn application currently handles the information needed to run a booking and deliver a private client gallery. Depending on how you use the service, this can include:

• your name, email address, phone number, and booking details;
• a Google account identifier and basic profile information when you sign in with Google;
• booking, payment-record, add-on, loyalty, and print-fulfillment records maintained for studio operations;
• gallery status, release and expiry dates, and selected photo file metadata; and
• account, session, security, and consent records needed to protect the service.

The repository currently records studio-entered payment information; it does not contain an online payment gateway.

Information is used to accept and manage bookings, keep customer history, operate the client portal, deliver private galleries, support studio fulfillment, and maintain account and service security. The booking flow records the version of the Booking Terms you accepted and the time of acceptance.

The specific lawful bases, notices for each data category, and any final retention schedule are still awaiting studio-owner and legal review. This interim notice does not make a final legal determination about those items.

Customer Google sign-in uses Google OpenID Connect profile and email information to authenticate you and link you to the appropriate customer record. Customers do not grant Pixcelyn the studio's Google Drive permissions through customer login.

The studio's separate Google Drive connection is used by authorized studio workflows to organize and deliver galleries. Photos are served from the studio's private Drive storage; the application does not permanently store the studio's photo library. Google's own privacy terms and account controls also apply to Google services.

Current booking terms describe private gallery access for three months after release. When that application access window expires, Pixcelyn stops making the gallery available through the customer portal; the underlying files may remain in the studio's Google Drive until the studio manages them there.

The repository does not establish retention periods for every customer, booking, payment, or account record. Those periods and any deletion process require owner confirmation.

Access is limited by server-side checks for the relevant customer, booking, gallery, and access window. Sensitive integration credentials are kept server-side and encrypted at rest. No security measure can guarantee absolute security.

Information may be processed by service providers needed to host, authenticate, store, and operate the application. The complete provider list, locations, and cross-border transfer details still require confirmation before this notice can be treated as final.

There is currently no self-service account deletion or data-export control in the application. For a privacy question or request, please use the studio's published contact channel. The owner must confirm the responsible privacy contact and request procedure before this notice is final.

Philippine data-subject rights and the National Privacy Commission's complaint channels may apply. The studio should confirm its final process and contact details with its privacy adviser.